This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft File: MhV9a4wSwFtBvEEkHQYVBAryQeE.mft (raw, json) Hash identifier: /s2aH89/Pybb4o2ppqBoLdaE0rB5rE97ECF61MQ2hbs= Subject key identifier: 25:C4:A4:64:CC:1E:67:4F:7C:51:84:0B:8D:30:8F:91:C8:06:1D:80 Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1 Certificate issuer: /CN=32157d6b8c12c05b41bc41241d0615040af241e1 Certificate serial: 019AF12DE89DA323ED8C8DB909070126988C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft Manifest number: 047C Signing time: Sat 06 Dec 2025 01:01:48 +0000 Manifest this update: Sat 06 Dec 2025 01:01:48 +0000 Manifest next update: Sun 07 Dec 2025 01:01:48 +0000 Files and hashes: 1: MhV9a4wSwFtBvEEkHQYVBAryQeE.crl (hash: f0q4M3HEe/2N/3HAhOXnfR/pQzX1XOI5uJbQNNN+KQ0=) 2: qJ1oXPy2zR5AWITHnFOnI8zbBtI.roa (hash: 2JhWie1vdrZ9TGWL5IWneU9ysYNZV//iN2iGhnspRb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e8:9d:a3:23:ed:8c:8d:b9:09:07:01:26:98:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1 Validity Not Before: Dec 6 01:01:48 2025 GMT Not After : Dec 7 01:01:48 2025 GMT Subject: CN=25c4a464cc1e674f7c51840b8d308f91c8061d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:9d:51:92:a0:54:83:19:04:f2:5a:3b:0f: de:2e:1b:c1:01:ba:34:58:99:49:ff:4a:2e:c7:94: 7a:46:6b:68:0c:d7:76:d0:dc:a4:9c:0d:95:b0:51: 0d:04:57:ad:25:97:fe:fe:d0:24:c1:65:3c:ac:8c: c5:15:5e:25:c0:25:40:f9:ec:a7:42:de:8a:7a:c1: fd:fb:94:60:9d:41:be:a9:29:a0:ca:0d:2a:7d:db: 4e:d4:ac:a6:c8:4e:21:9d:42:e3:c2:5e:49:1e:b8: c0:1c:ff:8f:8f:79:93:b1:57:bd:a7:75:c1:65:11: 8c:d4:ae:ee:bd:5d:aa:06:41:88:c3:b9:45:d0:6e: 68:e2:9c:09:c1:78:32:9f:f2:5c:d5:1b:dd:f0:41: 5f:8e:3c:39:88:0d:c7:f2:c0:5d:56:01:87:66:06: 76:61:50:0b:5a:14:af:37:31:69:ae:f4:d2:71:96: 84:5e:b3:e3:a6:b8:36:d8:42:d9:8b:f1:bc:06:db: 68:6f:4e:9f:a0:b5:75:43:8e:6f:f0:3e:5f:9e:f1: 6c:f0:50:44:73:d2:a9:74:65:e8:6b:7b:6a:31:f7: 78:a0:7b:6c:f7:8c:4a:ee:65:fd:08:6b:2d:f7:18: 1d:61:94:24:08:2f:da:7d:68:44:02:aa:15:f5:2b: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C4:A4:64:CC:1E:67:4F:7C:51:84:0B:8D:30:8F:91:C8:06:1D:80 X509v3 Authority Key Identifier: keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ca:1f:dd:b6:94:ac:da:16:32:0b:28:17:2b:de:41:ed:1e: 7f:51:b6:95:57:fe:f9:59:37:10:c1:c5:07:1e:25:5f:4d:ba: 2b:4c:f8:e7:0e:aa:b7:03:71:52:0b:9f:d2:37:01:9e:79:ef: 9d:e8:ef:d2:69:39:73:45:62:01:30:ea:17:40:49:51:45:98: 75:1c:c0:41:25:02:bc:36:6d:0b:d5:3c:9e:1f:42:a0:7d:43: 2a:ec:95:77:61:fc:33:a5:a6:47:ba:db:b6:c1:90:73:e4:07: 32:e3:71:e0:ac:5a:54:6c:c8:80:c3:90:f4:29:92:62:47:aa: 24:74:07:4d:6b:80:61:90:9c:76:e7:4b:a3:a1:96:01:c0:6a: 99:a1:b7:05:78:a9:c8:08:49:08:a5:c0:f5:a9:1e:96:93:23: 12:d5:7a:7d:77:fc:70:51:f2:5f:c5:57:04:38:36:dc:e4:8a: db:51:07:ab:29:07:ad:d7:d4:d7:df:ae:7e:f5:13:67:50:68: 90:39:fc:f5:b1:91:c0:a3:66:86:7d:4e:3d:ec:07:8e:dd:4c: 51:03:ff:ff:a7:a8:1b:bc:f4:1a:29:aa:23:0b:70:d3:c2:a9: f1:c4:19:f5:3e:bd:6f:e9:36:6b:b6:47:1d:42:58:2c:5c:d1: 04:09:e5:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeidoyPtjI25CQcBJpiMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMTU3ZDZiOGMxMmMwNWI0MWJjNDEyNDFkMDYxNTA0MGFm MjQxZTEwHhcNMjUxMjA2MDEwMTQ4WhcNMjUxMjA3MDEwMTQ4WjAzMTEwLwYDVQQD EygyNWM0YTQ2NGNjMWU2NzRmN2M1MTg0MGI4ZDMwOGY5MWM4MDYxZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpGdUZKgVIMZBPJaOw/eLhvBAbo0 WJlJ/0oux5R6RmtoDNd20NyknA2VsFENBFetJZf+/tAkwWU8rIzFFV4lwCVA+eyn Qt6KesH9+5RgnUG+qSmgyg0qfdtO1KymyE4hnULjwl5JHrjAHP+Pj3mTsVe9p3XB ZRGM1K7uvV2qBkGIw7lF0G5o4pwJwXgyn/Jc1Rvd8EFfjjw5iA3H8sBdVgGHZgZ2 YVALWhSvNzFprvTScZaEXrPjprg22ELZi/G8Bttob06foLV1Q45v8D5fnvFs8FBE c9KpdGXoa3tqMfd4oHts94xK7mX9CGst9xgdYZQkCC/afWhEAqoV9Sux/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXEpGTMHmdPfFGEC40wj5HIBh2AMB8GA1UdIwQY MBaAFDIVfWuMEsBbQbxBJB0GFQQK8kHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWhWOWE0d1N3RnRCdkVFa0hRWVZCQXJ5UWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80MTZhODAtZGM1Ni00NTE0LThiYzAt MjdmOWM4MjNlZGVhLzEvTWhWOWE0d1N3RnRCdkVFa0hRWVZCQXJ5UWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80MTZhODAtZGM1Ni00NTE0LThiYzAtMjdmOWM4MjNlZGVh LzEvTWhWOWE0d1N3RnRCdkVFa0hRWVZCQXJ5UWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMof3baU rNoWMgsoFyveQe0ef1G2lVf++Vk3EMHFBx4lX026K0z45w6qtwNxUguf0jcBnnnv nejv0mk5c0ViATDqF0BJUUWYdRzAQSUCvDZtC9U8nh9CoH1DKuyVd2H8M6WmR7rb tsGQc+QHMuNx4KxaVGzIgMOQ9CmSYkeqJHQHTWuAYZCcdudLo6GWAcBqmaG3BXip yAhJCKXA9akelpMjEtV6fXf8cFHyX8VXBDg23OSK21EHqykHrdfU19+ufvUTZ1Bo kDn89bGRwKNmhn1OPewHjt1MUQP//6eoG7z0GimqIwtw08Kp8cQZ9T69b+k2a7ZH HUJYLFzRBAnlzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:16 2025 by rpki-client